Burning Man Hacked!

image from WIRED

The news of hackers exploiting a “back door” in BMOrg’s new ticketing system broke last week on Reddit. We covered it last Wednesday in Ticket Hell. Now, the story has been picked up by a broader media audience, with stories in WIRED, Computer World, Paste Magazine, CBS Local, and SFist.

WIRED:

Burning Man has practically gone mainstream. The once-fringe desert camping festival is now cultural fodder for The Simpsons and Taco Bell commercials. Celebrities and CEOs routinely attend. So it’s no surprise that 40,000 Burning Man tickets sold out in less than an hour last Wednesday when they went on sale.

But software engineers in Silicon Valley hacked into the Burning Man ticketing system powered by Ticketfly to cut to the front of the queue. Who needs luck when you have engineering skills and you’re willing to use ‘em for your advantage?

…Several engineers and web developers on a Burning Man Reddit thread speculated that hackers were able to create this backdoor after discovering a few lines of JavaScript code on the ticketing website that gave preeminent access to tickets three minutes before they officially went on sale at noon on Wednesday.

“They left code in the page that allowed you to generate the waiting room URL ahead of time,” said Michael Vacirca, a software engineer at a large defense corporation. “If you knew how to form the URL based on the code segment then you could get in line before everyone else who clicked right at noon.”

Burning Man admits the error and says those hacked tickets will be put back up for grabs during the scheduled last-minute sale in August.

[Read the full story at WIRED]

It’s interesting to watch the corporate spin machine in action. Rather than any sophisticated hacking being required, simply entering your code directly into TicketFly seems to have worked. According to hundreds of Burner comments on the Interwebz, clicking the emailed link ten minutes after noon pretty consistently got Burners in to buy tickets immediately, whereas clicking the link a few seconds after noon led to many Burners being stuck in the queue for 90 minutes with no success.

To me, these are the real issues here: it was definitely not First Come, First Served, and it was trivially easy to bypass the queue – multiple methods were used, and most did not require the ability to write code or hack into systems. The focus on these “200 hacker tickets” is smoke and mirrors around the obvious explosion in the number of tickets being listed on the secondary market. Even BMOrg are now encouraging Burners to get tickets and vehicle passes “on the open market”. With software to automatically buy as many tickets as you want from TicketFly selling for a mere $750 – about the profit margin for a single ticket right now – it seems that there continue to be some serious issues with BMOrg’s ticketing system.

Who would have thought they could make it even worse than the lottery? As BMOrg proved with their Spark movie, perceived ticket scarcity makes a nice story for the media.

WIRED:

The way this year’s sale operated, however, didn’t help to dissipate the resentment. Those interested in purchasing tickets were placed in an online queue as each sale was processed and given a time estimate as to how long they would be kept waiting before they could purchase tickets. The time estimates kept shifting, going from an 24 minute wait, to 46 minutes, back down to 18 minutes, to then “more than an hour,” which might as well have read, “abandon all hope ye who enter here.” At one point, the line was inexplicably “paused” for several minutes, causing another nerve-wracking moment on social media.

This drastic, back-and-forth change in wait times gave those in line the illusion that somehow hackers were cutting in front of them and bumping them out of scoring tickets. Burning Man’s social media team responded by saying that the wait times fluctuated based on how long it took each buyer to complete the purchase. It surely didn’t qualm any anxiety to have used such an unpredictable factor as a counter, instead of a fixed number (“There are 39,999 people in front of you trying to buy tickets”).

See the comments from ZOrg in Emotional Roller Coaster From Hell about why this theory of wait times fluctuating because of some people taking a long time to complete transactions doesn’t add up.

WIRED:

This is not the first time Silicon Valley has been criticized for tampering with Burning Man’s ideals and processes. Last year’s festival garnered unflattering feedback from Burning Man die-hards after venture capitalists, executives and celebrities descended on the desert with air-conditioned camps, personal assistants and other VIP-perks. In recent years, Larry Page, Sergey Brin, Elon Musk, Jeff Bezos and Mark Zuckerberg have all scored tickets to Burning Man.

It seems like now, Silicon Valley is leveraging more than its money to get in front of the line.

[Read the full story at WIRED]

Way to shift the blame to your customers, BMOrg. “Silicon Valley is using its technical might to cheat the system and get Burning Man tickets”: it sure makes a great angle for a story, compared to “some people typed the code into TicketFly”.

Actually it’s BMOrg’s leadership that has been criticized for tampering with Burning Man’s ideals, not Silicon Valley. No-one gives a flying fuck if Zuck brings his P.A., but many Burners do care when some on the Board of Directors are selling $17,000 hotel rooms like it’s some sort of Mega-AirBnB in the desert, and getting an unlimited supply of tickets for their customers and sherpas.

Cancelling 200 tickets will do nothing to fix the problems that occurred in the Directed Group and Individual ticket sales. There is no evidence that it will hurt scalpers, indeed it may even punish some Burners for being radically self-reliant. BMOrg have said they will void these tickets and add them back to the OMG sale – so now there are 1200 tickets left, for 60,000 Burners to attempt to buy in milliseconds on August 5.

Charity Versus Tax-Free

image: Bearman/Flickr (Creative Commons)

image: Bearman/Flickr (Creative Commons)

In the comments to our BMOrg Hath Spoken article, Burner Cooter raised an interesting point.

This is a slight tangent but the deal with the non profit status is really starting to irritate me as it seems to get inserted every time the ethics of the Borg comes into question. Being a nonprofit organization in no way makes any implications on the honesty or ethics of the company. All it means is the profits get reinvested in the company since there are no share holders. 99% of the time this mean profits get spent on the salaries and benefits of top executives. Some of the most unapologetically corrupt companies in the world are non profits. Think FIFA or the NFL. But every time the topic of ethics comes up it is subtly pointed out that the Borg is a non profit. It doesn’t mean anything.

Sorry to irritate you, Cooter. While your general point is technically correct, and “non-profit” can simply mean “tax dodge” rather than “charity”, for the specifics of the Burning Man Project we need to look at 2 things:

1. The ByLaws of the Burning Man Project

2. The Statements of the Founders about the transition to a non-profit.

The NFL, chaired by Roger Goodell (Marian’s cousin?) is an unincorporated 501(c)6 tax-exempt trade association, based in Washington, D.C. Its tax-free status is quite controversial. FIFA is incorporated in Switzerland. The Burning Man Project is a 501(c)3 California Public Benefit corporation. According to the IRS:

Organizations described in section 501(c)(3) are commonly referred to as charitable organizations… 

The organization must not be organized or operated for the benefit of private interests, and no part of a section 501(c)(3) organization’s net earnings may inure to the benefit of any private shareholder or individual.

1. From the ByLaws of the Burning Man Project

Article 1: “The principled means that serve our mission shall always be inherent in our goals and projects”

bylaws article 1

 

 

Article 5: “charitable purposes” gets mentioned twice.

bylaws article 5

 

6:00 & Ring Road “The Directors may not engage in or approve any activity that is inconsistent with the Ten Principles”

bylaws article 6

 

6:00 to 9:00 & Ring Road: Duty of the Directors

“Directors shall conduct themselves ethically”

 

bylaws article 6 09

8:30 & Decommodification : Philosophy Committee

“must operate in order to remain true to the Ten Principles…shall become binding on the operations of Burning Man Project”.

bylaws 830d 03

 

Their latest blog post tries to claim that the “Burning Man event” is different from the “Burning Man Project”, but if the “Burning Man Project” did wholly acquire “Black Rock City LLC” as they claimed at the start of 2014, this cannot be true and the event must be part of “the operations of Burning Man Project”.

Black Rock City, LLC, which operates the annual event in Nevada called “Burning Man”, became a fully owned subsidiary of the Burning Man Project as of January 1, 2014:

On December 27, 2013, the Burning Man Project Board of Directors voted to make Black Rock City LLC a subsidiary and is now the sole shareholder of the LLC, which will continue to manage the event in the desert. The transition became official January 1, 2014.

Of course, they may have pulled “the old bait and switch”, and told us that they had sold “the” LLC to BMP, but actually sold Black Rock City, LLC to someone else. There are a lot of LLCs floating around within this this corporate conglomerate, as well as many registered non-profits. But I’m more inclined to take their statement at face value, which means the Burning Man event is a solely owned subsidiary of the Burning Man Project.

image: Dru/Flickr (Creative Commons)

image: Dru/Flickr (Creative Commons)

Other interesting clauses in the Bylaws refer to “non-voting observers” (Article 3, 6:30 & Inclusion), the right of the Founders to license the trademarks back to the group (Article 5, 1:00 & Center Camp), “a proposed transaction” (Article 5, 4:00 and Center camp), all kinds of allowable Real Estate transactions (Article 4, 10:00 & Center Camp) , Directors making money from the business via consulting, sale of goods and rent “at or below fair market value” (Article 5, 6:00 & Center Camp).

Despite Larry Harvey’s claims that the “10 Principles are just an ethos, not the 10 Commandments”, a Director can be removed “for cause” for failing to cure a breach of any one of the 10 Principles (article 6, page 12).

You read the Bylaws here.

2. Statements of the Founders

We’ve been trying to give them the benefit of the doubt that this is more than just a tax dodge, because that’s how they sold it to us since the idea was introduced in 2011, and that’s how it was promoted in the movie produced by former Burning Man Director Chris Weitz, “Spark: A Burning Man Story”.

 

The Burning Man Project’s Mission and Vision certainly sound very altruistic:

Mission

The mission of the Burning Man Project is to facilitate and extend the culture that has issued from the Burning Man event into a larger world. This culture forms an integrated pattern of values, experience, and behavior: a coherent and widely applicable way of life. The survival and elaboration of this culture depend upon a cultivated capacity for learning and transmitting knowledge to succeeding generations.

Vision

The Burning Man Project will bring experiences to people in grand, awe-inspiring and joyful ways that lift the human spirit, address social problems and inspire a sense of culture, community and cultural engagement.

When they announced that their transition had been “fully completed”, they said:

The Burning Man Project is a public benefit organization, and our intention is to build the network of connectivity through relationships with individuals, organizations and government entities. We have great ambitions for what we sometimes refer to at HQ as a “100 year plan.” We’re a little over a quarter century into that plan… and our best days are still ahead.

We are restructuring some of our operations to strengthen our capacity to deliver on our ever-growing potential as a force for creativity and good in the world

Marian Goodell, Huffington Post March 4 2014:

“In our more exciting moments, any one of us who has been to Burning Man thinks it can change the world,” she added. “It brings people hope, and it makes people less afraid of others. It transcends religion and politics. It’s worth it to expose others to what we’ve learned from this cultural experience.”

Larry Harvey, New York Times August 28, 2011:

“We’re going to treat Burning Man like what it always should have been: not as a commodity, but as a gift

Larry Harvey, Burning Blog:

Our mission has always been to serve the community, and a non-profit public benefit corporation is the most socially responsible option to ensure and protect the future of Burning Man

Scribe in SFBG, discussing “Spark: A Burning Man story”

More cynical burner veterans may have a few eye-rolling moments with this film and the portrayals of its selfless leadership. While the discussions of the ticket fiasco raised challenging issues within the LLC, its critics came off as angry and unreasonable, as if the new ticket lottery had nothing to do with the temporary, artificial ticket scarcity (which was alleviated by summer’s end and didn’t occur this year under a new and improved distribution system).

And when the film ends by claiming “the organization is transitioning into a nonprofit to ‘gift’ the event back to the community,” it seems to drift from overly sympathetic into downright deceptive, leaving viewers with the impression that the six board members are selflessly relinquishing the tight control they exercise over the event and the culture it has spawned.

Yet our interview with the LLC leadership shows that just isn’t true. If anything, the public portrayals that founder Larry Harvey made two years ago about how this transition would go have been quietly modified to leave these six people in control of Burning Man for the foreseeable future.

Larry Harvey, the New Yorker:

Burning Man is guided by what initiates call the Ten Principles: Radical Inclusion, Gifting, Decommodification, Radical Self-Reliance, Radical Self-Expression, Communal Effort, Civic Responsibility, Leaving No Trace, Participation, and Immediacy. These ideas, Harvey suggested, might one day form the basis of a new world order

Here’s the official launch of the Burning Man Project on August 5, 2011. I was in the crowd that day, before I started this blog. I believed them to be genuine in what they said: “we want to help change lives”. Larry starts at about 10:00.

 

Blazed and Confused: the Simpsons Aftermath

blazing guy circle

The Simpsons broke burningman.com, just from its East Coast showing. It’s been down for at least 3 hours now: kind of surprising that BMOrg didn’t have someone working Sunday night in anticipation that something like this might happen.

The Simpsons has been rating very well this season, their recent Family Guy crossover was the #1 non-sports program on TV with 4.5% of households watching it.

simpsons cup cakes

The event is presented as a viable alternative for family camping on Labor Day weekend, and relatively easy to get to. $200 is mentioned as a ticket price for next year.

I think it’s fair to expect a massive increase in ticket demand for 2015, and a massive increase in the number of safari tourists who want to take selfies at Burning Man and cross it off their bucket list. “Oh you went to that thing on the Simpsons?”

I predict a ticket price increase, perhaps to $500 or more. The vehicle tax will stay, and may also be increased.

I don’t think it’s realistic to expect that the 40%+ Virgins who will be encouraged by this mainstream advertising will all learn our values and read the 20-page Survival Guide before they show up. It’s time to consider some changes to the event, such as more recycling stations and paid clean-up crews. Otherwise, the DPW Restoration volunteer team are just going to get saddled with the MOOP, like they were this year from Caravancicle/Lost Hotel, Gypsy Flower Power, and other camps.

Another consideration would be selling blinky lights at Center Camp. This is a safety issue. Let’s forget about this “all commerce is banned” charade, there were 45 licensed vendors this year. Everything from gasoline to energy drinks is for sale – not to mention AirBnB rooms and merchandise. Let’s banish darkwads, if we can.

simpsons man el pulpo

We’ve heard a rumor – currently unconfirmed – that next year’s theme will be Circus-related. The last rumor we heard was that 2013 would be aliens, we were asked not to repeat that and we respected our source’s request. It turned out to be true when the Cargo Cult Man base was a giant UFO.

Circus seems appropriate, because Burning Man will now be full of ASSclowns, party animals, and frat boy monkeys.

Without giving away too many spoilers, those who feel that there’s more to Burning Man than drugs and nudity will be disappointed with the way Burning Man Blazing Guy was portrayed in the episode. Conservative Marge is initially hesitant about the free-spirited event, until she is unwittingly dosed with magic tea and starts tripping balls – then she loves it all. The aging baby boomers who fondly remember dropping acid in the Sixties will probably be driven to make Burning Man their next family camping destination. It’s surprising to see The Simpsons glorifying drug use in this way; it will only serve to reinforce the negative associations with Burning Man held by many in Defaultia. Disappointingly, there was nothing about any of the Principles. There were no sound camps, and absolutely no untz untz (EDM).

Pranking, shooting guns, tents flying away, dust storms, art cars, funky bicycles, costumes, giant sculptures, a long road trip through the desert to get there, drum circles, even fake Facebook accounts are all referenced.

I found the episode amusing, but not as funny as the earlier Malcolm in the Middle and South Park ones. I give it a 7/10, or three and a half stars.

Good luck getting tickets next year, Burners. I expect a brisk trade for the Commodification Camps and Donation tickets.

Who's the man in the cowboy hat?

Who’s the man in the cowboy hat?

Millhouse...phone home

Millhouse…phone home